CVE-2017-1000220

soyuka/pidusage =1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution...

CVE-2017-1000220

The CVE-2017-1000220 entry concerns the pidusage library (version ≤ 1.1.4). The connected sources confirm that pidusage passes unsanitized input to child_process.exec(), enabling arbitrary command execution (command injection) in the ps-related functionality. Affected platforms include Darwin, Su...

PT-2017-10916

Name of the Vulnerable Software and Affected Versions soyuka/pidusage versions 1.1.4 and earlier Description The issue allows for command injection in the module, resulting in arbitrary command execution. Affected versions of pidusage pass unsanitized input to child process.exec, leading to...

CVE-2017-1000220: Improper Neutralization of Special Elements used in an OS Command

soyuka/pidusage =1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution...